Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E35D98F6E73411EE825C9AB8775412E6.roa
File: E35D98F6E73411EE825C9AB8775412E6.roa (raw, json)
Hash identifier: ThESN+3JeY8AYShoxVWudI+ewQCwUeTyLJiEzhZiiD4=
Subject key identifier: 8D:AB:E4:85:2B:86:E4:70:24:24:E3:00:3F:86:6F:05:5F:3B:5C:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: A35C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E35D98F6E73411EE825C9AB8775412E6.roa
Signing time: Thu 21 Mar 2024 03:41:23 +0000
ROA not before: Thu 21 Mar 2024 03:41:20 +0000
ROA not after: Tue 23 Apr 2024 03:41:20 +0000
asID: 44559
IP address blocks: 154.207.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 23 Apr 2024 00:04:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 41820 (0xa35c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 21 03:41:20 2024 GMT
Not After : Apr 23 03:41:20 2024 GMT
Subject: CN=65fbac63-b73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:31:91:99:91:43:70:03:ad:2c:63:0c:ac:
7a:e1:3b:f5:f3:7d:19:78:c6:d6:ac:72:d1:80:bb:
93:1d:a5:4e:26:9a:b6:55:c5:a8:52:49:f7:65:24:
a4:70:54:3b:20:5f:84:70:cb:ed:c9:3c:30:ab:03:
c1:43:2f:57:ec:cf:69:0f:16:08:b6:d3:2f:b0:7d:
b6:82:80:0c:1e:85:3f:53:fa:86:ee:28:e4:f8:b6:
05:52:7c:3d:d9:2a:0d:8f:71:9c:0a:37:38:d3:6c:
77:e0:cd:94:8a:c7:9a:06:c7:a9:02:53:13:7e:f0:
ac:e2:4e:08:ff:3f:38:df:3f:16:4b:67:0e:99:ff:
43:a6:27:ca:a9:d1:7f:6e:cc:38:c8:3b:31:36:35:
1c:1b:f4:5c:10:a6:eb:22:d6:b8:0d:8a:de:e8:66:
1f:69:e2:ba:d8:b7:82:2d:10:c2:0c:5f:d5:a4:85:
59:57:ff:d8:1f:d1:86:2f:e4:e3:92:4e:2b:fc:0f:
16:f5:d3:05:7b:60:89:b8:b1:b5:3b:4d:92:ca:6f:
d6:9f:af:b9:8b:b1:78:21:ab:e6:e2:34:a4:f3:5a:
54:c7:59:b2:7e:91:d5:17:2f:69:76:7e:5c:b5:a3:
07:38:4d:8f:df:b2:54:52:a5:6c:b2:60:d8:b4:df:
aa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:AB:E4:85:2B:86:E4:70:24:24:E3:00:3F:86:6F:05:5F:3B:5C:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E35D98F6E73411EE825C9AB8775412E6.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.207.11.0/24
Signature Algorithm: sha256WithRSAEncryption
08:52:e8:00:c0:92:72:1a:f0:11:58:ea:24:ee:c8:60:d4:9b:
be:1d:b4:4d:34:f1:a7:8c:ae:58:eb:a9:d7:66:02:35:c2:e0:
d6:49:11:76:45:c8:61:50:8b:87:15:e5:b2:e4:2d:44:89:6e:
7a:03:a8:c3:42:da:15:2b:dd:35:13:dc:ae:e1:0b:06:39:3e:
5d:70:ea:d4:43:3b:93:9a:2e:41:69:ef:41:29:25:1d:97:93:
e3:b8:ed:45:34:27:f6:d4:3f:29:b8:3e:15:40:e8:e4:75:e7:
94:cb:f8:4f:f5:43:66:21:ae:a1:85:40:79:c0:26:af:92:13:
0c:12:68:fa:66:31:8d:c9:e5:ab:42:d4:77:37:15:36:b2:1f:
2d:fd:5d:22:79:50:56:ab:28:f1:99:1b:c1:1f:76:f6:1a:2d:
1e:e9:cc:ae:58:e3:68:b2:c9:08:5e:6a:b4:07:7f:6a:92:71:
e2:79:13:6f:a8:54:80:ec:d8:46:76:ae:79:d2:d7:ab:32:d9:
7c:7d:68:a8:5a:66:c8:a0:60:cc:13:09:e4:7e:23:7a:8f:83:
63:cf:16:75:bd:92:9e:be:d0:51:ea:ac:df:e7:fa:de:06:44:
21:74:9e:06:ee:b0:ea:38:8e:a5:e4:1d:c6:08:3b:21:63:3d:
c7:bb:10:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 03:30:25 2024 by rpki-client on console-fra.rpki-client.org